Carrier Peering

Carrier Peering enables you to access Google applications, such as G Suite,
by using a service provider to obtain enterprise-grade
network services that connect your infrastructure to Google.

When connecting to Google through a service provider,
you can get connections with higher availability and lower latency, using
one or more links. Work with your service provider to get the connection you
need.

Use Case

To access G Suite applications from an on-premises network, an organization
might need a DMZ (perimeter network) to reach Google's network. The DMZ enables
organizations to expose an isolated subnetwork to the public Internet instead of
their entire network. Instead of setting up and maintaining a DMZ, the
organization can work with a service provider so that their traffic travels
on a dedicated link from their systems to Google. With the dedicated link, the
organization gets a higher availability and lower latency connection to Google's
network.

Considerations

If used with GCP, Carrier Peering doesn't produce
any custom routes in a VPC network. Traffic sent from
resources in a VPC network leaves by way of a route whose next
hop is either a default Internet gateway (a default route, for example) or a
Cloud VPN tunnel.

To send traffic through Carrier Peering using a route whose next hop is a
Cloud VPN tunnel, the IP address of your on-premises network's VPN
gateway must be in your configured destination range.

See the next section to determine which of these solutions is right for you.

How to choose

The following table describes the differences between Direct Peering and
Cloud Interconnect.

Carrier Peering

Cloud Interconnect

Can be used by GCP, but does not require it

Requires GCP

Gives you direct access to G Suite and Google services,
including the full suite of Google Cloud Platform products, from your on-premises
network through a service provider's network.

Does not
give you access to G Suite, but gives you access to
all other Google Cloud Platform products and services from your on-premises network.
Also allows access to supported APIs and services using
Private Google
Access from on-premises hosts.

You need to contact Google if you need to change the destination IP
address ranges to your on-premises network.

You can easily change the destination IP address ranges for your
on-premises network by adjusting the routes that your routers share with
Cloud Routers in your project.

Routes to your on-premises network do not appear in any
VPC network of your GCP project.

Routes to your on-premises network are learned by
Cloud Routers in your project and applied as
custom dynamic routes in
your VPC network.

Pricing

Google Cloud Platform egress traffic through Carrier Peering
connections is billed at the following rates:

NA: $0.04/GB

EU: $0.05/GB

APAC: $0.06/GB

To receive this pricing, you must notify the
Google sales team after signing up
with one of the providers. All other traffic, including ingress traffic
through the connection, is billed at standard Google Cloud Platform
rates.

FAQ

Where are the connections physically located?

Service providers offer service in a range of locations around the world.
Please contact them for local availability of their service. Please note that
Google and its networking partners are working to increase the number of
locations throughout the world where Google's networks connect with carrier
networks to deliver the best possible experience.

Can I purchase connections from multiple service providers?

Yes, you can purchase from multiple service providers. Doing so may
be helpful in situations where you want to connect disparate parts of your
WAN that are managed and provisioned separately by different providers. In
such a case, you would have a commercial relationship with both providers
for connectivity.

Does Google offer a Service Level Agreement (SLA)?

Customers should consult with their network service provider to determine
whether that provider may offer an SLA. Google does not offer an SLA
with this program

Is the Carrier Peering connection secure?

Google has no control over the connection traffic while it traverses the
provider's network; we encourage customers who have security needs to consider
using strong encryption.

Can I connect to the Internet via this connection?

No, you cannot connect to non Google services through the Carrier Peering
connection.